VMware has released security updates and workarounds to address remote code execution vulnerability (CVE-2022-22966) in VMware Cloud Director. VMware has evaluated the severity of these issues to be in the critical severity range with a CVSSv3 base score of 9.1. The flaws affect VMware Cloud Director versions 10.1.x, 10.2.x, and 10.3.x, and have been remediated in versions 10.1.4.1, 10.2.2.3, and 10.3.3.

More information on vulnerability and updates is available in VMware security advisory – VMSA-2022-0013.